CVE-2023-42668

CVE-2023-42668 describes an “Incorrect default permissions” issue in onboard video driver software for Intel® Server Boards based on the Intel® 62X chipset, before version 1.14, potentially allowing an authenticated user to escalate privileges via local access. The CVSSv3.1 vector is AV:L/AC:H/PR...

CVE-2023-42668

Incorrect default permissions in some onboard video driver software before version 1.14 for IntelR Server Boards based on IntelR 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Media SDK 和 Intel oneVPL software 安全漏洞

Intel Media SDK is a multimedia SDK software development kit from Intel Corporation USA. It is used for video encoding, decoding and processing in Windows and embedded Linux applications. A security vulnerability previously existed in Intel Media SDK and Intel oneVPL software version 23.3.5, whic...

PT-2024-12824 · Intel +1 · Libva +1

Name of the Vulnerable Software and Affected Versions: Libva versions prior to 2.20.0 Description: The issue is related to an uncontrolled search path in some Libva software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is caused by a...

PT-2024-13054 · Intel · Intel Server Boards

Name of the Vulnerable Software and Affected Versions: IntelR Server Boards based on IntelR 62X Chipset versions prior to 1.14 Description: The issue is related to incorrect default permissions in some onboard video driver software, which may allow an authenticated user to potentially enable...

PT-2024-13631 · Intel +1 · Intel Onevpl +1

Name of the Vulnerable Software and Affected Versions: IntelR oneVPL versions prior to 23.3.5 Description: The issue is related to a NULL pointer dereference, which may allow an authenticated user to potentially enable information disclosure via local access. Recommendations: For versions prior t...

GHSA-8C85-4RR5-CHR4 Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS

This Security Advisory is about a vulnerability in VideoJS, which is bundled in DemoBundle and the ezdemo legacy extension. Older releases of VideoJS contain an XSS vulnerability in the Flash-based video player. This is bundled in DemoBundle, and in the Legacy "ezdemo" and "ezdemo-ls-extension"...

CVE-2024-4670

CVE-2024-4670 : The All-in-One Video Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to and including 3.6.5 via the aiovg_search_form shortcode. The issue can be exploited by authenticated attackers with contributor-level access or higher to include and execu...

WordPress All-in-One Video Gallery plugin <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode vulnerability

Authenticated Contributor+ Local File Inclusion via aiovgsearchform Shortcode vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin All-in-One Video Gallery versions = 3.6.5...

PT-2024-40352 · Ez Systems · Ez Publish Legacy +1

Name of the Vulnerable Software and Affected Versions: VideoJS versions prior to the version that fixes the XSS vulnerability eZ Publish Platform 5.4 eZ Publish Legacy 5.4 Description: The issue is related to an XSS vulnerability in the Flash-based video player of VideoJS, which is bundled in...

WordPress plugin All-in-One Video Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in t...

WordPress All-in-One Video Gallery Plugin <= 3.6.5 is vulnerable to Local File Inclusion

Software All-in-One Video Gallery Type Plugin Vulnerable versions = 3.6.5 Fixed in 3.7.0 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-4670 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 402ad478bb5f Credits Ngô Thiên An ancorn Required...

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo version 12.4. An attacker exploited the vulnerability to execute a cross-site scripting attack...

SRS 安全漏洞

SRS is a simple, efficient, real-time video server from SRS Open Source. A security vulnerability exists in Simple Realtime Server that stems from allowing a remote attacker to execute arbitrary code via a crafted request...

Rocky Linux 9 : gstreamer1-plugins-bad-free (RLSA-2024:2287)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2287 advisory. - GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ...

Intel® Server Board Onboard Video Driver Advisory

Summary: A potential security vulnerability in some Intel® Server Board onboard video driver software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-42668 Description: Incorrect default...

CVE-2024-33250

An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268Leo and SRS/4.0.195Leo allows a remote attacker to execute arbitrary code via a crafted request...

PT-2024-25169 · Srs · Srs

Name of the Vulnerable Software and Affected Versions: Open-Source Technology Committee SRS real-time video server versions 4.0.195 through 4.0.268 Description: An issue in the SRS real-time video server allows a remote attacker to execute arbitrary code via a crafted request. Recommendations: Fo...

RHEL 6 : webkitgtk (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2021-30954...

RHEL 7 : gstreamer-plugins-bad (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio...